Search squid archive

Re: Implementing SslBump using Bump-Server-First in Transparent mode using squid-3.HEAD-20121231-r12554

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I have the same configuration, except I use wccp/gre tunnel.  Port 80
requests work but 443 don't.  I am not sure if this is right, but even
though data was received on wccp, no data was transmitted back over
wccp.   Is this expected behavior?  If not, what do I do to make
response go over wccp?

my iptable config look like this

iptables -t nat -A PREROUTING -i wccp0 -p tcp --dport 80 -j DNAT --to
192.168.5.81:3228
iptables -t nat -A PREROUTING -i wccp0 -p tcp --dport 443 -j DNAT --to
192.168.5.81:3229

and squid.conf

wccp2_service dynamic 90
wccp2_service_info 90 protocol=tcp priority=240 ports=80,443


On Tue, Jan 1, 2013 at 2:08 AM, Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote:
> On 1/01/2013 7:19 p.m., Swapneel Patnekar wrote:
>>
>> Eliezer & Amos,
>>
>> Thank you for your input & assistance.
>>
>> The iptables rules are on the same machine in which I'm running squid.
>>
>> Amos, just for my understanding changing the below given directive
>> should do the trick ?
>>
>> ssl_bump client-first all
>>
>> to
>>
>> ssl_bump server-first all
>
>
> As far as I am aware at this stage yes.
>
> Amos


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux